ARDvark parses the Apple Remote Desktop (ARD) files to pull out application usage, user activity, and filesystem listings.
☆36Jun 1, 2023Updated 3 years ago
Alternatives and similar repositories for ARDvark
Users that are interested in ARDvark are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Registry to JSON. This Project is for learning purposes and is not maintained.☆12Dec 28, 2021Updated 4 years ago
- Parsers for common structures across windows formats.☆12Aug 23, 2023Updated 3 years ago
- Queries for parsed spotlight database in sqlite☆13Dec 29, 2020Updated 5 years ago
- pollen - A command-line tool for interacting with TheHive☆36Jun 6, 2019Updated 7 years ago
- 010 template for apfs☆27Feb 26, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Hundred Days of Yara Challenge☆12Jun 21, 2022Updated 4 years ago
- Simple CLI utility to save off an image from every webcam hooked into a mac☆14May 20, 2021Updated 5 years ago
- lnk_parser is a full rust implementation to parse windows LNK files☆24Feb 17, 2026Updated 7 months ago
- USN to JSON☆22Apr 4, 2020Updated 6 years ago
- A DFVFS Backed Forensic Viewer☆42Apr 13, 2020Updated 6 years ago
- ☆108May 14, 2018Updated 8 years ago
- NTFS file system specimens☆13May 21, 2026Updated 3 months ago
- A document tagging library☆36May 2, 2026Updated 4 months ago
- ☆24Aug 30, 2019Updated 7 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- JXA script based on research by Jeff Johnson on leveraging TextEdit to remove quarantine attributes on files. Jeff's original research is…☆17Jan 31, 2021Updated 5 years ago
- ☆12Jun 30, 2016Updated 10 years ago
- Collection of Nmap scripts☆11Nov 27, 2015Updated 10 years ago
- RisingSun: Decoding SUNBURST C2 to identify infected hosts without network telemetry.☆12Jan 14, 2021Updated 5 years ago
- Windows eventlog formatting, live fetching and querying utility in C☆21May 26, 2020Updated 6 years ago
- Rhaegal is a tool written in Python 3 used to scan Windows Event Logs for suspicious logs. Rhaegal uses custom rule format to detect sus…☆43Sep 21, 2023Updated 2 years ago
- [⛔️ Deprecated] Venator is a python tool used to gather data for proactive detection of malicious activity on macOS devices.☆175Jul 1, 2020Updated 6 years ago
- Help deobfuscate VBScript☆18Jul 1, 2022Updated 4 years ago
- Jamf Pro scripts and API calls for computers, mobile devices, and users — some shell, some Python☆29May 10, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A parser of Windows Defender's DetectionHistory forensic artifact, containing substantial info about quarantined files and executables.☆120Jan 26, 2022Updated 4 years ago
- exploit on macOS 10.11.x☆13Mar 22, 2019Updated 7 years ago
- ☆12Aug 10, 2019Updated 7 years ago
- A Canary which fires when uninstalled☆34Mar 16, 2021Updated 5 years ago
- The "DFUR" Splunk application and data that was presented at the 2020 SANS DFIR Summit.☆13Sep 9, 2020Updated 6 years ago
- Automated YARA rule generation from the Cert Central compromised certificate database.☆16Updated this week
- JSON Power Tool: Retrieve and manipulate JSON data using JSONPath, JSON Pointer, JSON Patch, and JSON Merge Patch. Written in Javascript,…☆34Nov 6, 2023Updated 2 years ago
- Parses the WMI object database....looking for persistence☆35Dec 12, 2019Updated 6 years ago
- Tool to rip system and user data from OSX and macOS☆16Dec 6, 2022Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆53Oct 20, 2020Updated 5 years ago
- Crowdstrike Falcon Host script for iterating through instances to get alert and other relevant data☆14Jul 16, 2019Updated 7 years ago
- Python bindings for LZFSE☆18Jul 9, 2020Updated 6 years ago
- PoC that manipulates Windows file times using SetFileTime() API☆64May 25, 2019Updated 7 years ago
- Capture all RabbitMQ messages being sent through a broker.☆32Feb 13, 2021Updated 5 years ago
- Slides from my AD Privesc talk at WAHCKon 2017☆16May 6, 2017Updated 9 years ago
- Bro PCAP Processing and Tagging API☆28Nov 9, 2017Updated 8 years ago